

OGC/PCLU (Rev. 04/01/30! 1) 


FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM / PROJECT: I . ’ 

BikR FBI l nnpm to t R); \ Ft oHYO )m 


b7E 


RkK m mhet Fu unc.evaded -x-iO'r 



SYSTEM/PROJECT PO€ 

FBI OGC/PCLU FOC: 


Name: SSA| | 

Name: AGCl 1 


Program Ot.tsce: Geospatial 

Phone: I ^ 


Division: Di. 

Room Number: JEM, Rm 7350 


Phone :| I 



Room Number: 1.1100 



FBI DIVISION INTERMEDIATE APPROVALS 



' g " ' '“'a ' '0 O 'C ' Op 0 0 

executive t s Division determines) 

Do ishm ibivaev Officer 

Records Management 
Division 

Signature: j 

Date smoem .s?/„ b ? 

\.UUvj I 

' , < ' t v't v. ' V 


Security Division; 

Signature: 

Oak s.e.ned 

.1 

' k X "• ' a V v o ' a > 


Directorate of 

V' \> 

Signature: 

Date ssgned: 

Dale signed: 

Name:| | 

\ mm| | 

^ * ' e 

Inc vU'unoneot A sv ;„:mo \nuby 


After ad division approvals, forward signed hard copy pins decironk <>:>py to FBI OGC/PCLF FIEB ?dS0y 
(The FBI Privacy and Civil Liberties Officer's determinations, conditions. and/or tiruu approval wdt be recoded on the 
(chewing page.) 
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imcLA ^ mimm-OR official one only 

MWl JKi \}'^>\ \! ('OM'HU'V .. 

_ FI A is required by the B-Govertnnem Act. 

Ft A is to be completed as a metier oftBi/DOJ discretion, 
is FI A to be published on hBi.GOV (alter any RMD FOiA redactions?? .Yes. 

System does not codec;, maintain, or disseminate Fit. 

System is grandfathered (in existence before 4/17/2003; no later changes posit; 
X Information in the system relates to Internal government operations. 

System has bees; previously assessed, under an evaluation similar to a PIN. 

N-:> significant privacv issues (or oris am issues are unchanged'). 

.Other"; 


Applicable SORNts): Central Records System. lXt.l/j'Bl-002. 63 Fed . Reg . 8 671 (Feb. 20. PNSEmd Department n 

' ss. \ ' i ' t x \ x SS Os ' ' x ^ ss \ " 


Notify FBI RYEYRIFN per MRX.i 190.2.3? X No Yea-Nee sample BC on PCI C intranet website b 

htt p:/dsr;'r;<FD()/()(}(.Y|.uyya>ctjj/prnu!eyCivil%20I..lbertlcsY;20l...ibm;y/lb!tn(orn!lf;g I POCBcc os pd 

KORN/SORN revision(s) required? X No Yes ; 


a tor related forms? 


<\V -.v "• ' s' ! s . v . . \ s s 

The system may contain Federal records whether or not it contains Privacy Act requests and, in any event, a records 

V V ' V ' \ \ \ . W S V X C' ' 

compliance with reemiremems lor Ibeeiromc Recordkeeping Certification and any necessary updates. 


Other 


| E'ow l ml i turn 
;rd Civil Liberties Unit 


Dirge Signed: y./t sM i X- 


C \ ' V Gy 


Jacqueline F. Puowu. Acting Deputy General Counsel 
FBI Privacy arid Civil Liberties Officer 


(Ol'HOXi.f Yi'OM \ 
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E INFORMATION ABOUT THE SYSTEM / PROJECT 


L Provide a general de.script.BK? of the system or project that includes; (a) na 
the system/projeet, iododmg associated acronyms; (h) structure of the 
system/projeeh including intercoa.neet.ions with other projects or systems; (e> 
purpose of the sysiem/project; Id) nature of the information in the system/pro; 
and how if will he used; |e) who will have access to the inforntafion in the 





















>; YES 


(If yes, please continue.) 


,N (. ) «» U ! S n ' 1 v >n 

'Ns N S Y < > ‘ <' « ' U * 

linkable to an individual. 

(Check ail that apply, • 

The information directly identifies specific individuals. 

X The Information is intended to he used, in conjunction with other data elements, 
to indirectly identify specif e individuals, 

\ ' S V > . ' < v‘ . 1 i ' O N U ' ' ‘ < 1 ' V N 

is linked or linkable to specific individuals). 

| h id net contal a the names of FBI personnel. No 

other Pi I will he included in the data. I I 


If you marked any of the above, proceed to Question 4. 

None of die above if none of the above, describe why the information does not 
ee\ ' o vs, e v d c, % v u ' 

4 , ? N N \ ' N V ! ' < NNN N N 

.NO .X.YES 


5. Is information about United States citizens or lawfully admitted permanent resident 
aliens retrieved from the systenvprojeei. by name or other personal identifier? 

.X.NO. {if my skip in question 7.) 

YES. {Jives, proceed to the next question.) 
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b7E 


6. Does the svstern/project collect any Information directly from the person who is the 
subject of the information? 

NO ||| no, proceed §| question ?.j 

.YES 

a. Does the system/project support criminal> CT, or PCI investigations or 
assessments? 

.NO 

_ Y ES 11f yes, proceed to question 7. j 

b. Are subjects of information from whom the information is directly collected 

provided a written Privacy Act (e)(3) statement, (either on the collection form or via a 
separate notice)? 

NO {The program will need to work with POLE to develop/lmplement 
the necessary form(s),j 

.YES Identify any forms, paper or electronic, used to request such 

information from the information subject; 

7. Are Social Security Numbers (SSNs} collected, maintained or disseminated from the 
system/project? Full SSNs should only be used as identifiers in limited instances. 

.X.NO YES If yes, cheek all that apply : 


SSNs are necessary to cstablish/confirm the- identity of subjects, victims, 
witnesses or sources in this law enforcement or intelligence activity. 


.SSNs ate necessary to identify FBI personnel in this internal administrative 

system. 

...SSNs are important for other reasons Describe: 

flte system project provides special protection to SSNs (e.g.> SSNs are 
encrypted, hidden from ait users via a look-up table, or only available to certain 
users). Describe; 


7 
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In Hie s\sKm opet Ccd K ;s '-Uriscl-'f / 

X.No. 

\ ON \ XWiVX X U'U SlCUm O'.H rated b> C 'Un^orns iOi Ok rm m 5y ''- 
vOOVUCmd Xo.«.\ At .'W.On.SO! iXCOiCX Hv i CdCKd XcqtUVd mil IHc-Oathm 
contains standard contract eiauses that must be included in die event, the system 

V ! - V \ S >' , \ V l V x - 

imposed as a matter of Department of Justice policy. Cousidtadom: with the 
Office of the General Counsel may be required if a contractor Is operating the 
system tor the FBI. 

Has the system undergone Certification & Accreditation (C&A) by the FBI 
Sectf.rily I)ivIsmn (SeeI))? 

X .NO If no, Indicate reason; ifX'&A is pending, provide anticipated 

completion date: 

Since tins is pari of a pilot project, it has not undergone C&A at this 
point, hoi it will go through <X%A at the appropriate stage. However, 
Security Division has reviewed and approved the use of this tool 
under the c ire am stances described above. 

.YES If yes, please indicate the following, if known; 

Provide date of last C& A eertifieation/re-ee*yifieationt 

Confidentiality:_Low_Moderate_High_Undefined 

Integrity; _.Low Moderate High Undefined 

Availability; ..Low Moderate High Undefined 

Not applicable - this system is only paper-based. 

Docs the sy stem conduct data mining as defined in Section 804 of the 
ht.ipie.men ting Recommendations of the 9/11 Commission Act of 2007. P.L. 110- 
S3 modified at 42 CSC 2000ee-3 O 

X NO 

.YES if yes, please describe the data mining fintetion: 
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IJNC'LASSIFI EDI/FOR foi : Pw'Wi fo'fo ON I/V 


11. is this a national security system (as determined by the SecDj? 

.X NO l|| 

12. S tatus of System/ Proj ec?: 

X This is a new system/ project in development 


IL EXISTING SYSTEMS / PROJECTS 
.1. When was the system/project developed? 

2. Has the system protect undergone any significant changes since April 17, 2003? 
I. NO | If no, proceed to next question {If.3}.j 


YES If yes. indicate which of the following changes were involved (mark all 
changes that apply . ami pros kfe brief explanation for each marked change) 

A conversion from paper-based records to an electronic system, 

A change from information in a format that is anonymous or non- 
identifiable to a format that is identifiable to particular individuals. 

A new use of an IT system/project, including application of a new 
technology, that changes how information in identifiable form is managed. 
(For example. & change that would create a more open environment and/or 
at enue for exposure of data that previously d id not exist,) 

A change that results In information in identifiable form being 
merged, centralized, or matched with other databases. 

A new method of authenticating the use of and access to 
information in identifiable form by members of the public. 

__ A systematic incorporation of databases of information in 

tdemifiahk form purchased or obtained from commercial or public sources 

A new interagency use or shared agency function that results in 
new uses or exchanges of information in identifiable form, 

_ A change that results in a new use or disclosure of information In 

identifiable form 
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V V ' ON \n i C-' 0 ' 

form being added into the system/project. 

(Changes do not involve a change in the type of records maintained, 
the individuals on. whom records arc maintained, or the use or 
dissemination of information from the systent/projeet. 

Other (Provide brief explanation): 



a. Provide dMe/tiiie of the PI A: 
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\|\ s \ \o N \ n \ n .s vs ' ssO 

naanagernent in collaboration with I F, security, and end-user management and OCOPCLU. (PiAs/PTAs 
rdadng to dec ironic fortoafoaesbonnaires implicating the Paperwork Reduction Act should also be coordinate I 
with the RMD Forms Desk,} if the tmbicet of a PI A/FIA is endec the program cogoteance of an FSiHQ 
Division, prior to forwarding to CK.sC the PIVvPiA must also be referred to the FBffiQ Division, tor prog.re.nt 
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I 111 vm\ U'\ ri!Ri>!IOU> V» 


\ \vn ot Mo) i M rn^tt t r .'.0-1 
MKR FBI Usjqse A*s«t 0): .....;SVF :: 000004 


isi : riiioFFi« Svssera (T!CMS) 


nVSTEMTJMMEO' foc 

! FBI OCC/FCLF FO€ 1 

Navscl —I 








D>vObo/r iT Scrx ice 

R.OOir: 

Member: ) id 1. /'MO 

1 1 



\ \ 




FBI im i\n a i\Tnn»} *>i \ n- mtbos \i s 


| Frognxoi Marirxger (»:«• .-dnrr /ippioprmse 
\v i h'^ > ' \ v dy ^ •./iiva 

" n - o i\.\,w sb; .\ 

F ‘"' iia i ys” ,i “ : 0Mr(i,'54Cv 

V. :• ivr ; i./ssie aigs-vb':' \ i'QOEiii /) 

i Noose: TiiHodsv OaUii&her ' MM 
ibv V.' 000 ^ 0 .' 

Mem creel \ 

imc verCs; C F?V / 

Ncroe; | | 

i idi i {O I'M Moss: | SigosBurej j 

SM;?;iO;ie:| | 

i; Semees; ; Deie esasieo; ec : : ; i i ; 

Dree s; e rscd: / C ■' C N • ■// 

! n*H- 1 

Namcl | 




•Mice jsII dhbsion sippS'OveM, ibsweed «iga«d Fssrd ecoy rdo-s efceimok copy to FBI OMC/PCLC id EM /J5$>.;. 

OFe FBI Fi'ivsury arid Civil i On-rOea OCssiX deisstobsoiboie sc/rMiOxvie riod-or Co a; rsppfS'vfd wii be ivc/vded //rs she 
ivdosvins; vaae.; 
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iNCLASsiFiia:,3Ss«S> 

PSU MB OTBNO d Oi U^muONS 


PIA is ace required tor vhe Rdknvlog res sunt;;}: 

System does not eoRvep maintain. or disseminate PH. 

System k grand ushered fin existence he lore 4/1 7/2003; no Ones change;; posing significant privacy risks;. 
Information is; 0:;c syslent rdat.es to nPeoun government srperalfonr. 

System has keen prev ioask assessed sender an evaluation kmslarto a PI A. 

.Ac kgrnfkam privacy : senes (or privacy Issues are unchanged). 

Other ; 


s v^p i K ei''k N S'' * R i |4 i; * V :a * v:5: ^ a ^ ^ v\- * s>jn i 

' ^ JV* 1 






NotKv FBI RMPPRIDS oer MiOG 190.2.4? 

PUP ^ oome ; DOd..A.ir7h..TB h'Cid .VPrlYscyk out 

No ...X...V 
VN? Liberties; 

es-ASs 

c2(IL; 

e sample LC on PC.I..I. 
P rare do rm tor j n Isos 1 ; . 

Intranet web sue 
0-2-3 ecovpd 

X,e. 

BORNXORN revisioo(s) required? X No 

Vcs ; 






Prepare/revkefodd Privacy Ac;. (c)O} at.in.emeats 

lor related IPs; 

ns? 

No .Vcs : 




RECORDS. The program should consul; with Rolls ns idemny 
Tire system n;ay carman: Federal records svhether or run it coma:;: 
schedule approved hy do: National Archives and Records Adndn 
as seed as on compliance with requirements for rdeeiroosc Recon 

ressdr 
s Pro 
S'U'od 

c any I vdcru: records?- 
acy Act requests and. 1 
nms necessary. Roll) 

ectrook records isenes. 

; any even;, a. records 
ao provide advice on ;hk 

:'' v CC CAN kt "V U [>t 5 vCN, 

Other 

li do; Chief 

Sm.uarare: 

— 



l O\Vfr 


Privacv sod Civil i.lRerdes knit 

Da;c Slones: 





.lames .1. ! andon.. Deputy Genera: Counsel 

RBI Privacy and Civil Liberties O!river 

Signature: 




j U 





< 
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I, INFORMATION ABOUT TO E SYSTEM / PROJECT 

T Provide a general description of the system nr project that includes: (a) name of 
tfhe sysfenr/projeeg including associated acronyms; (h) structure of the 
\\\\ " ' ^ including iotcrcoo.oectio.os with other projects or systems; (e) 

purpose of the systeos/projeei; (hi nature of the information m the syste.ru/projeet 
and how it will he used: <«} w ho will hove access to the t.oformation in the 
systens/proleet; tf) and the manner of transmission to ah users. 

M j>hsTTThe ir.tmcc.ot images Cose Management Mmcm (ItCMS) is a 
centralized data warehouse residing on the PBINI/T Intranet. The purpose or HOMS is to 
store copies of evidentiary materials related to Sexual exploitation of Chi ldren cases that 
will be used as exhibits tor trials. if necessary, by the innocent images National Initiative 
sUhl 







| Once loaded into the fit. MS. analysts attach other tiles collected as 


part of the undercover investigations pettaming to the online sexual exploitation of 
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2. Does the s> sterna project collect, maintain* or disseminate any Information abt; 
individuals the., a human feeing or natural person, regardless of nationality)? 

.NO 

X YES | If yes, please ennfmae.j 

3, Please indicate if any of the following characteristics apply to the information 
system about individuals; Bear in mind that log-on Information may identify or I 
linkable to an individual. 

(Check all that apply.) 

X 1 he information directly identifies specific individtrals 

\ i v 'o \ ended :ve used, in conjunc >n with other dat elei 

to indu'cctly identify specific individuals. 

.X. The information cart be used to distinguish or trace an individual's identtr 

is linked or linkable to specific individuals) 


CXC:LASSIhlkt>/?r^ff 
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If you marked am- of the above., proceed to Question 4 



NO. j lf oso sktp to (|e vsisoo 7, | 

\ ' v It nx "Kvu(Uo toe ooM N v^s* 



NO |The program will »eed to work wkh 1*0,11 to de vetop/ktsp tests vtst 
the stveessary fonts 0)4 


YIN ktvsstsf} am- torsos, popes' or electronic, osvst to request soeh 
mformoHon from the information subject! 

\ \ ' N \ \ S V ■' X * , , N 
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encrypted. hidden lYurn ah users via a look-up table. nr only available to certain 
trscom Describe: 

X X is not feasible for the ry stcnvpnhec: to provide spaced protection to 
SSNs. Evpiaim UCYiS data consists of unstructured data, such as text files, 
WordPerfect documents as well as official FBI documents, slab data docs not 
spec dies; iv identity SSNs as touch of the data is Nee test.. Thus, it is not 
realistically feast ole to identity all occurrences of SSNs its the system. 
Additionally, SSNs are necessary to properly .identity a subject within. the system. 

M the system operated by a contractor? 

.X No. 

Yes. lotormatior; systems operated by contractors for the FBI rosy be 
considered Privacy Act systems of records The Federal Acquisition Regulation 
contains standard contract clauses that must he included in the event the system 
collects, maintains or dissert on at es PI I and additional requirements may be 
imposed as a matter of .Department of Justice policy. Consultations with the 
Office of the General Counsel may be required if a contractor is operating the 
system lor the FBI. 

Idas the system undergone Certlucabon & Accreditation (C&A) by the FBI 
Security Do islon I SecD)'? 

... NO If me, indicate reason; if C.Y%,4 is pending, proGda anticipated 

ctnnpletkm date: 

.X YES If yes., please indicate the foiknOng, if known: 

Provide date of last €MA cmjficnBk«t/re~etrfM1eat?ont CXA 
recei ved February 8, 2d 11. 

Confidentiality;_Low_Mfkierate _.X Jiigfe_Undefined 


U xc: LASSI f! ObMN^fr 
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Integrity: _Low X Moderate High Undefined 

Availability; _Law X Me&rafe Hiffe Undefined 

N v\ V S S v > ' X ' 'V 

10. Is this syetemdndcct the subject of an OM8-3O0 budget submission? 

. >i NO 

Y ES If yew please provide the date end name or 

title of the OMB submission: 

1.1. I v'v s s o o'lsige e; Sc.. "' § v 

I "o\"Oi on" ; Kc'v-U'i'\"\'ueew t'i d\ ' ss svoU \ ' J'V' ?' ‘ U> ■ 

"3 KaOitkb ;it ' i SC XO s \ ' 

X NO 

YEN if yes, please describe the data Mining function: 

12. is this o oa^ t&ewrny system \ determined K ;V So. O' ' 

.X.NO .YES 

1 3. Status of System/ Project: 

Tbis is a new system/ project in devdopment 

IE EXISTING SYSTEMS / PEOdECTS 
I, Y yen ^.0" i\ v \ col r 5 ' * - - sw\edged' i Ve$Kt X Eh;3 

2 v vl S v. S K'fOl v vs \ 

NO fo." puvood 50 •iexUKOsiO'C tH 'Jo 

\ X vS s' S vO's V O' s a' \s v ^ ' SO Sv pOo'Eub 

changes that apply * and provide brief explanation for each marked change> 

X ceo'sowo'o O'o:o renv;'d\;W'J svsK-N s ; - dbE's’t s\Woo; 

\ CHUUK t5's''''5 5Pto; ii'UU''it O' OsXOU: UW W n.nosi'-W'Ojs O: 5 '' 5“ 
! O- a ibnTusi * sEoi Xj^X m pwdidai mdiwdods 

0 NC: L. ANSI E! EIYT^T 


•org 
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X \ new use ot mi '-1 system proieeu inekdhm appht .ufon of x gem 
technology, that changes how information in identifiahk form is managed, 
s: v'f', w mgk., l change |hat wnuidcreme a tnongopen ere a-won so. and 0? 

^ \uv o'h.nn r v n ' <■ v o»o 

7'cd v \>kwv ;e* \ tavern Iwsge, ' t\l 0 c T> NAwoo 

aopfontwr ai owing uushuomd hold uwsa aovww. a the ' MS dataset 
Additionally.. DCMS has undergone a fob technical refresh, upgrading 
\e ter 'o ' "w e e \ v. M-. > -,. ' •, v ou^ \ -. \r v In e " aden 

' ' dv \ e,v v v s v. w 'n ,eno ' c O o ' 

„V 'e w ;t ' ' i K ^ \ 

s s a x "Uu^hes v e< . \C' 

A new method of authenticating the use of and access to 
iafonastioo < ideas; liable ienn by members of the public, 

A systematic oworporation <H databases oi information to 
^ K-, vorw\ ;W\tw\ o \o\; urn s wn - - 'Wur<> 

A sww miesugeees ow w -wusad nettm fnssew t that tee. - t 
Us',.v.. tscs -' esch.ngm oi o ha mat on m'fo. rtdwhfo Wmi 

r \> ■g c' mm-t |y r v" o-weo r o ' 

idem; dahic form. 

A change that results in son items of information in identifiable 
t uoi mg-added uo it < nun pro cm 

s'; e v - A> not pdn ., change m foe type of n s m A 0 

v t n >«' w Im c c >; 

dmemination of information hern tin system./projest. 

Other | Provide brief explanation]; 

;Vxm a \ \ for Jus smmm - M ech \matg ^ n s ' 

.X.NO _YES 


a. Provide dsie/trde of the PI.4; 

YES 
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Sensitive But I jadassifie<l/ ^T5 lliglaH^S! S5Y^ 

FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

(Equivalent to the DOJ Initial Privacy Assessment (IPA)) 

NAME OF SYSTEM / PROJECT: INTELPLUS 
BIKR FBI Unique Asset ID: SYS-000QQ48 

b6 
b7C 


Derived From: 

SYSTEM/PROJECT POC 

FBI OGC/PCLU POC 

Classified By: 

Name: | | 

Name: 



Reason: 

Program Office: ITSD 

Phone 



Declassify On: 

Division: ITSD 

Room Number: 7350 (JEH) 


Phone:! 1 




Room Number: 1333B 




FBI DIVISION INTERM EDIATE APPROVALS j complete as necessary consonant with Division policy ] 



Program Manager (or other appropriate 
executive as Division determines) 

Division Privacy Officer 

Program Division: 

Information Technology 
Services Division 
(ITSD). 

Signature: /s/ 

Date signed: 9/13/2010 

Name: Daniel D. Dubree 

Title: Assistant Director 

Signature: /s/ 

Date signed: 9/21/2010 

Name:| | 

Title: Information Technology Specialist 

FBIHQ Division: 

Information T echnology 
Services Division 
(ITSD). 

Signature: /s/ 

Date signed: 9/13/2010 

Name: Daniel D. Dubree 

Title: Assistant Director 

Signature: /s/ 

Date signed: 9/21/2010 

Name: | I 

Title: Information Technology Specialist 


After all division approvals, forward signed hard copy plus electronic copy to FBI OGC/PCLU (JEH 7338), 

(The FBI Privacy and Civil Liberties Officer's determinations, conditions, and/or final approval will he recorded on the 
following page.) 

Upon final FBI approval, FBI OGC/PCLU will distribute as follows: 

1 - Signed original to file 190-HQ-C1321794 (fwd to JEH 1B204 via PA-520) 

Copies (recipients please print/reproduce as needed for Program/Division file(s)): 


Sensitive But t 
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1 - DOJ Office of Privacy and Civil Liberties (via e-mail to 
privacy@usdoj .gov) 

(if classified, via hand delivery to 1331 Penn. Ave. NW, Suite 940, 
20530) 

2 - FBI OCIO / OIPP (JEH 9376, attn l I _ 

1 - FBI SecD/AU (ele c copy: via e-mail t o U Q I 

1 - RMD/RMAU (attn l _ I 

2 - Program Division POC /Privacy Officer 
2 - FBIHQ Division POC /Privacy Officer 


1 - OGCVPCLU intranet 
1 -PCLUUC 
1 - PCLU Library 
1 - PCLU Tickler 

b6 

b7C 


Sensitive Bait Imclass 
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PCLU/FCLO following PTA submission. The FTA drafter should skip to the next page arid con tinoe.l 


_PIA is required by the E-Government Act. 

_PIA is to be completed as a matter of FBI/DOJ discretion. 

Is PIA to be published on FBI.GOV (after any RMD FOIA redactions)? _Yes. _No (indicate reason): 


X PIA is not required for the following reason(s): 

_System does not collect, maintain, or disseminate PII. 

_System is grandfathered (in existence before 4/17/2003; no later changes posing significant privacy risks). 

_Information in the system relates to internal government operations. 

X System has been previously assessed under an evaluation similar to a PIA. 

_No significant privacy issues (or privacy issues are unchanged). 

_Other (describe): 

IntelPlus file rooms have been added to IDW and the privacy implications of using the information were assessed at 
that the time of ingest. 


Applicable SORN(s): _ DQJ/FBI-002 _ 

Notify FBI RMD/RIDS per MIOG 190.2.3? _No X Yes—See sample EC on PCLU intranet website here: 

http://home/DO/OGC/LTB/PCLU/PrivacyCivil%20Liberties%20Library/form_for_miogl90-2-3_ec.wpd 

SORN/SORN revision(s) required? X N o _Yes (indicate revisions needed): 


Prepare/revise/add Privacy Act (e)(3) statements for related forms? _No _Yes (indicate forms affected): 

N/A 


RECORDS. The program should consult with RMD to identify/resolve any Federal records/electronic records issues. 
The system may contain Federal records whether or not it contains Privacy Act requests and, in any event, a records 
schedule approved by the National Archives and Records Administration is necessary. RMD can provide advice on this 

as well as on compliance with requirements for Electronic Recordkeeping Certification and any necessary updates. _ 

Other: 


Elizabeth R. Withnell 

Signature: /s/ 

Acting Deputy General Counsel 

FBI Privacy and Civil Liberties Officer 

Date Signed: 9/24/2010 
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I. INFORMATION ABOUT THE SYSTEM / PROJECT 

1. Provide a general description of the system or project that includes: (a) name of 
the system/project, including associated acronyms; (b) structure of the 
system/project, including interconnections with other projects or systems; (c) 
purpose of the system/project; (d) nature of the information in the system/project 
and how it will be used; (e) who will have access to the information in the 
system/project; (f) and the manner of transmission to all users. 

IntelPlus is a client/server Graphical User Interface (GUI) document management 
application accessible by authorized users in all FBI offices. It provides a complete set of 
full text searching capabilities and permits the electronic maintenance and retrieval of 
images of evidentiary materials in PDF and/or HTML format for ease of information 
sharing and use in connection with FBI mission activities. 


b7E 


2. Does the system/project collect, maintain, or disseminate any information about 
individuals (i.e., a human being or natural person)? 

_NO [If no, STOP, The PTA is now complete and after division approvaf(s) 

should he submitted to FBI OGC/PCLU for final FBI approval. Unless you are 
otherwise advised, no PIA is required.] 

X YES [If yes, please continue.] 

3. Please indicate if any of the following characteristics apply to the information in the 
system about individuals: Bear in mind that log-on information may identify or be 
linkable to an individual. 

(Check all that apply.) 

_X_The information directly identifies specific individuals. 
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X_ The information is intended to be used, in conjunction with other data elements, 
to indirectly identify specific individuals. 

X_The information can be used to distinguish or trace an individual’s identity (i.e., it 

is linked or linkable to specific individuals). 


If you marked any of the above, proceed to Question 3. 

_None of the above. If none of the above, describe why the information does not 

identify specific individuals either directly or indirectly. [If you checked this item, 
STOP here after providing the requested description.] 

4. Does the system/project pertain only to government employees, contractors, or 
consultants? 


X NO _YES 


5. Is information about United States citizens or lawfully admitted permanent resident 
aliens retrieved from the system/project by name or other personal identifier? 

_NO. | If no, skip to question 7.] 

X YES. [If yes, proceed to the next question.] 

6. Does the system/project collect any information directly from the person who is the 
subject of the information? 

_NO [If no, proceed to question 7.] 

X YES (in some cases) 


a. Does the system/project support criminal, CT, or FCI investigations or 
assessments? 


_NO 

X _YES [If yes, proceed to question 7.] 


b. Are subjects of information from whom the information is directly collected 
provided a written Privacy Act (e)(3) statement (either on the collection form or via a 
separate notice)? 

_NO [The program will need to work with PCLU to develop/implement 
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the necessary form(s).] 


_YES Identify any forms, paper or electronic, used to request such 

information from the information subject: 

7. Are Social Security Numbers (SSNs) collected, maintained or disseminated from the 
system/project? Full SSNs should only be used as identifiers in limited instances. 

X NO _YES If yes, check all that apply: 


_SSNs are necessary to establish/confirm the identity of subjects, victims, 

witnesses or sources in this law enforcement or intelligence activity. 


_SSNs are necessary to identify FBI personnel in this internal administrative 

system. 

_SSNs are important for other reasons. Describe: 

_The system/project provides special protection to SSNs (e.g., SSNs are 

encrypted, hidden from all users via a look-up table, or only available to certain 
users). Describe: 

_It is not feasible for the system/project to provide special protection to 

SSNs. Explain: 

8. Is the system operated by a contractor? 

_X_No. 

_Yes. Information systems operated by contractors for the FBI may be 

considered Privacy Act systems of records. The Federal Acquisition Regulation 
contains standard contract clauses that must be included in the event the system 
collects, maintains or disseminates PII and additional requirements may be 
imposed as a matter of Department of Justice policy. Consultations with the 
Office of the General Counsel may be required if a contractor is operating the 
system for the FBI. 

9. Has the system undergone Certification & Accreditation (C&A) by the FBI 
Security Division (SecD)? 

_NO If no, indicate reason; if C&A is pending, provide anticipated 

completion date: 

X YES If yes, please indicate the following, if known: 
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Provide date of last C&A certification/re-certification: 05/02/2008 


Confidentiality:_Low_Moderate X High_Undefined 

Integrity: _Low X Moderate _High_Undefined 

Availability: _Low X Moderate _High_Undefined 

_Not applicable - this system is only paper-based. 

10. Is this system/project the subject of an OMB-300 budget submission? 

_NO 

X YES If yes, please provide the date and name or 

title of the OMB submission: FY2010. Field Investigative 
Systems Support 

11. Does the system conduct data mining as defined in Section 804 of the 
Implementing Recommendations of the 9/11 Commission Act of 2007, P .L. 110- 
53? 

_X_NO 

_YES If yes, please describe the data mining function: 

12. Is this a national security system (as determined by the SecD)? 

_X_NO _YES 

13. Status of System/ Proj ect: 

_This is a new system/ project in development. [If you checked this block, 

STOP. The PTA is now complete and after division approval(s) should be 
submitted to FBI OGC/PCLU for final FBI approval and determination if 
PIA and/or other actions are required.] 


H. EXISTING SYSTEMS / PROJECTS 

I. When was the system/project developed? 1995 

2. Has the system/project undergone any significant changes since April 17, 2003? 
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X NO [If no, proceed to next question (II.3).] (Although new databases has been 
created in IntelPlus, there have been no significant changes to the structure of the system 
that would have an effect on privacy. 


_ YES If yes, indicate which of the following changes were involved (mark all 

boxes that apply): 

_ A conversion from paper-based records to an electronic system. 

_ A change from information in a format that is anonymous or non- 

identifiable to a format that is identifiable to particular individuals. 

_ A new use of an IT system/project, including application of a new 

technology, that changes how information in identifiable form is managed. 
(For example, a change that would create a more open environment and/or 
avenue for exposure of data that previously did not exist.) 

_ A change that results in information in identifiable form being 

merged, centralized, or matched with other databases. 

_ A new method of authenticating the use of and access to 

information in identifiable form by members of the public. 

_ A systematic incorporation of databases of information in 

identifiable form purchased or obtained from commercial or public sources. 

_ A new interagency use or shared agency function that results in 

new uses or exchanges of information in identifiable form. 

_ A change that results in a new use or disclosure of information in 

identifiable form. 

_ A change that results in new items of information in identifiable 

form being added into the system/project. 

_ Changes do not involve a change in the type of records maintained, 

the individuals on whom records are maintained, or the use or 
dissemination of information from the system/project. 

_ Other [Provide brief explanation]: 

3. Does a PIA for this system/project already exist? 

X NO _YES 
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If yes: 


a Provide date/title of the PIA: 

b. Has the system/project undergone any significant changes since the PIA? 
_NO _YES 

[The PTA is now complete and after division approval(s) should he submitted to 
FBI OGC/PCLU for final FBI approval and determination if PIA and/or other 
actions are required.] 


Semi five Bn t U nd a ssIfied/ZF or 
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FBI FT A 

L INFORMATION ABOUT THE SYSTEM / PROJECT 

L Provide a general description of the system or project that includes: (a) mime of 
the system/project, including associated acronyms; (h) structure of the 
sysfem/projeet, including Interconnections with other projects or systems; (e) 
purpose of the system/project; (d> nature of the information in the system/project 
and how it will be used? (e) who will have access to the information In the 
system/projeet: (f) and the manner of transmission to ali users. 

The Internet Crime Complaint ('enter >f€3), established in 2000, is a partnership 
be w *.n to£ I B m 1 th ron-pn»fit Natmua! WI o d t t'k Ce itei (\\\ K) r> 
set re a^ a \ ehiele to receive, dove op and icier a n in. co up! air is regie lit g tee i p dK 
expanding arena of Internet crime/ Such crimes may Include violations of intellectual 
property rights, computer intrusions, economic espionage, online extortion and 
international money laundering, in addition to identify theft The IC3 pros ides 
individuals and businesses with a convenient online way to report cyber crime. The 1C3 
also serves as a central referral entity for complaints involving Internet-related crimes to 
federal, state and local law enforcement and regulatory agencies. 



and vvww.io o ksto ogo o dt obgtfue.com. a joint FBI/industry site focusing on public 
education about common Internet frauds. 


Individuals wishing to rile complaints with IC3 access the CRF through a portal 
on ibe n w w 1 C 3 co\ website While the complainant ultimately decides how much 
information to provide, data fields on the CRF Include the complainant name, mailing 
address and telephone number and the name, address, telephone number and web address, 
if available, of the individual or business allegedly defrauding the complainant. The CRF 
aNo c i ‘airs several text I uses in which specitie details of the cs n c may be seported 
including any monetary loss. 

Before submitting a CRF. the complainant must first accept the terms and 
con “l i s disp ayed o i the w ebsi e ag tc u> ntei lia t rat tl c information p ov ^(.d “is, 
correct to the best of my knowledge'" and that ‘‘providing false information'' could cad to 
"fine, imprisonment, or both,'" After submitting a report, the. complainant receives, via e- 
maik a unique complaint ID for the report and a random password. A comp la inant may 
then use the ID password to access the complaint v i ■. the IC3 portal and prov ide 
supplemental information. 
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2. Does the system/project collect, maintain, or disseminate any information about 
individuals (Le„ a human being or natural person, regardless of nationality)? 


NO | If no, STOP. The FTA is now complete and after division approvals) 

should he submitted to FBI OGC/PCLIJ for final FBI approval. Unless you are 
otherwise advised, no FI.4 is required.) 

X YES f!f yes, please continue.) 

3 . Please indicate if any of the following characteristics apply to the information in the 
system about individuals: Bear in mind that log-on information may identify or be 
linkable to an individual 
(Check, all that apply.) 

X The information directly identities spec?tic individuals. 

X The information is intended to be used, in conjunction with other data 

elements, to indirectly identify speeiJie mdivtduais. 

X The nformation con be sscd to distinguish or trace au indi vidua s be tt ty 

(be., it. is linked or ii.nk.ahlc to specific indi viduals). 

If you marked nay of the above, proceed to Question 4, 

None oft.be above, if none of the above, describe why the information does not 
identify spool be iitdividudls either directly or indirectly, fi f you cheeked this item, 
STOP here after providing the requested description.) 

4. Does the sysfem/profect pertain only to government employees, contractors, or 







